chore(deps): bump the version-updates group across 1 directory with 6 updates by dependabot[bot] · Pull Request #87 · qdrant/qdrant-spark

dependabot · 2026-08-30T04:42:40Z

Bumps the version-updates group with 6 updates in the / directory:

Package	From	To
io.netty:netty-bom	`4.2.15.Final`	`4.2.17.Final`
io.qdrant:client	`1.18.3`	`1.19.0`
com.google.guava:guava	`33.6.0-jre`	`33.7.1-jre`
io.grpc:grpc-protobuf	`1.82.1`	`1.83.1`
org.apache.spark:spark-sql_2.13	`4.1.2`	`4.2.0`
com.fasterxml.jackson.core:jackson-databind	`2.21.5`	`2.22.2`

Updates io.netty:netty-bom from 4.2.15.Final to 4.2.17.Final

Release notes

Sourced from io.netty:netty-bom's releases.

netty-4.2.17.Final

What's Changed

AsciiString.cached(String) should sanitize the provided String (#13749) by @vpelikh in netty/netty#17007

Fix deploy workflow by @normanmaurer in netty/netty#17071

Fix AsciiString.cached(String) performance regression by @dreamlike-ocean in netty/netty#17074

SslHandler: Fix possible buffer leak when an OOME is thrown during allocation by @normanmaurer in netty/netty#17059

Avoid leak presence detector in leak profile by @yawkat in netty/netty#17073

Add HttpContentCompressor constructor with ability to specify desired maxPipelineDepth by @reta in netty/netty#17068

IoUring: preserve readPending when rescheduling cancelled reads by @dreamlike-ocean in netty/netty#17087

Reject negative maxOrder in PooledByteBufAllocator by @coderbruis in netty/netty#17093

Fix AdaptiveByteBuf._setLongLE calling checked setLongLE by @franz1981 in netty/netty#17098

Snappy: Guard decoder against invalid chunk lengths by @yawkat in netty/netty#17099

Fix OCSP Tests by @chrisvest in netty/netty#17114

Update to latest netty-tcnative release by @normanmaurer in netty/netty#17056

Use safe decompressor in Lz4FrameDecoder by @yawkat in netty/netty#17118

Configure TestLens for the PR builds by @chrisvest in netty/netty#17129

IoUring: add SO_INQ support for Unix domain sockets by @dreamlike-ocean in netty/netty#17127

fix(mqtt): drop UNSUBACK reason codes for MQTT 3.x encoding by @ChunMengLu in netty/netty#17117

Propagate the CI envionment variables through to the docker builds by @chrisvest in netty/netty#17138

Codec-compression: Add decompressor API by @yawkat in netty/netty#16745

Fix silent failures and optimize error short-circuit in multi-threaded tests by @rajan-github in netty/netty#17106

Codec-compression: Add Bzip2Decompressor by @yawkat in netty/netty#17145

Fix buddy cache evicting chunks with live buffers by @franz1981 in netty/netty#17154

Codec-compression: Add Snappy frame decompressor by @yawkat in netty/netty#17153

Codec-compression: Add zlib decompressors by @yawkat in netty/netty#17155

Codec-compression: Add Zstd decompressor by @yawkat in netty/netty#17152

Codec-compression: Add LZF decompressor by @yawkat in netty/netty#17147

Codec-compression: Add BrotliDecompressor by @yawkat in netty/netty#17146

Codec-compression: Add Lz4FrameDecompressor by @yawkat in netty/netty#17148

HttpObjectEncoder / DefaultHttp2FrameWriter: fix buffer leak when a Throwable is thrown during header encoding by @HwangRock in netty/netty#17089

Fix direct memory OOM on low-core containers by @franz1981 in netty/netty#17166

IoUring: Fix the recvmmsg emulation by @dreamlike-ocean in netty/netty#17187

Avoid classloader leak via GlobalEventExecutor terminationFuture failure by @seonwooj0810 in netty/netty#17140

BrotliEncoder: Prevent duplicate close scheduling by @yawkat in netty/netty#17175

Fix JdkZlibDecompressor losing the tail of highly compressible streams by @renechoi in netty/netty#17191

Update compress-lzf to 1.2.1 by @yawkat in netty/netty#17194

Do not write WebSocket handshake response to the tail of the pipeline by @el-psy-kongroo-d in netty/netty#17192

HttpServerCodec: do not consume the method queue for 1xx interim responses by @HwangRock in netty/netty#17182

Weakly reference engines from the OpenSSL engine map by @bryce-anderson in netty/netty#17199

OpenSSL: Allow to obtain used named group via OpenSslSession by @normanmaurer in netty/netty#17058

Add .editorconfig to enforce consistent coding style by @vpelikh in netty/netty#17052

Update surefire plugin to latest version by @normanmaurer in netty/netty#17210

Merge changes from forks by @chrisvest in netty/netty#17213

New Contributors

@vpelikh made their first contribution in netty/netty#17007

@ChunMengLu made their first contribution in netty/netty#17117

@rajan-github made their first contribution in netty/netty#17106

@seonwooj0810 made their first contribution in netty/netty#17140

@renechoi made their first contribution in netty/netty#17191

... (truncated)

Commits

e0789d3 [maven-release-plugin] prepare release netty-4.2.17.Final
1b5abc6 Merge changes from forks (#17213)
36fbf57 Update surefire plugin to latest version (#17210)
a96226c Add .editorconfig to enforce consistent coding style (#17052)
14a4e6a OpenSSL: Allow to obtain used named group via OpenSslSession (#17058)
26255b1 Weakly reference engines from the OpenSSL engine map (#17199)
ae41417 HttpServerCodec: do not consume the method queue for 1xx interim responses ...
41f1db5 Do not write WebSocket handshake response to the tail of the pipeline (#17192)
035d76e Update compress-lzf to 1.2.1 (#17194)
7681aff Fix JdkZlibDecompressor losing the tail of highly compressible streams (#17191)
Additional commits viewable in compare view

Updates io.qdrant:client from 1.18.3 to 1.19.0

Release notes

Sourced from io.qdrant:client's releases.

v1.19.0

Updates

Support for Qdrant v1.19.x - https://github.com/qdrant/qdrant/releases/tag/v1.19.0

Commits

chore(deps): bump the version-updates group with 2 updates by @dependabot[bot] in qdrant/java-client#134

chore(deps): bump the version-updates group with 5 updates by @dependabot[bot] in qdrant/java-client#135

chore(deps): bump the version-updates group with 6 updates by @dependabot[bot] in qdrant/java-client#137

chore(deps): bump actions/setup-java from 5.4.0 to 5.5.0 in the version-updates group by @dependabot[bot] in qdrant/java-client#138

chore(deps): bump the version-updates group with 5 updates by @dependabot[bot] in qdrant/java-client#139

chore(deps): bump the version-updates group with 4 updates by @dependabot[bot] in qdrant/java-client#142

chore(deps): bump actions/setup-java from 5.5.0 to 5.6.0 in the version-updates group by @dependabot[bot] in qdrant/java-client#140

chore(deps): bump actions/checkout from 5.0.1 to 6.1.0 by @dependabot[bot] in qdrant/java-client#141

chore(deps): bump the version-updates group with 6 updates by @dependabot[bot] in qdrant/java-client#144

1.19.0 by @Anush008 in qdrant/java-client#143

Full Changelog: qdrant/java-client@v1.18.3...v1.19.0

Commits

d30855a 1.19.0 (#143)
058c3e7 chore(deps): bump the version-updates group with 6 updates (#144)
e50da94 chore(deps): bump actions/checkout from 5.0.1 to 6.1.0 (#141)
9ce0b0f chore(deps): bump actions/setup-java in the version-updates group (#140)
7dbe029 chore(deps): bump the version-updates group with 4 updates (#142)
fdbc3ce chore(deps): bump the version-updates group with 5 updates (#139)
c6abd55 chore(deps): bump actions/setup-java in the version-updates group (#138)
b613a13 chore(deps): bump the version-updates group with 6 updates (#137)
806cfd4 chore(deps): bump the version-updates group with 5 updates (#135)
64cf2c2 chore(deps): bump the version-updates group with 2 updates (#134)
See full diff in compare view

Updates com.google.guava:guava from 33.6.0-jre to 33.7.1-jre

Release notes

Sourced from com.google.guava:guava's releases.

33.7.1

Maven
<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>33.7.1-jre</version>
  
  <version>33.7.1-android</version>
</dependency>
Jar files

33.7.1-jre.jar

33.7.1-android.jar

Guava requires one runtime dependency, which you can download here:

failureaccess-1.0.3.jar

Javadoc

33.7.1-jre

33.7.1-android

JDiff

33.7.1-jre vs. 33.7.0-jre

33.7.1-android vs. 33.7.0-android

33.7.1-android vs. 33.7.1-jre

Changelog

Guava 33.7.1 removes the Multi-Release line from our jar manifest, fixing an issue under Java 9 and 10 that was introduced to guava-jre in version 33.7.0. Sorry for the trouble.

33.7.0

Newly introduced problem for Java 9 and Java 10 only

Guava 33.7.0 includes a Multi-Release line in its jar manifest, even though it is no longer a multi-release jar. This causes some problems with tools from Java 9 and Java 10. The issue is fixed in version 33.7.1. Sorry for the trouble.

Maven
<dependency>
  <groupId>com.google.guava</groupId>
  <artifactId>guava</artifactId>
  <version>33.7.0-jre</version>
  
</tr></table>

... (truncated)

Commits

See full diff in compare view

Updates io.grpc:grpc-protobuf from 1.82.1 to 1.83.1

Release notes

Sourced from io.grpc:grpc-protobuf's releases.

v1.83.1

gRPC Java 1.83.1 Release Notes

Improvements

netty: Fix client-initiated stream limit bypass in NettyServerHandler (#12942). Enforces the limit proactively at startup without waiting for SETTINGS_ACK

core: Coalesce Contiguous Small Buffers for ReadableBuffer (#12944)

v1.83.0

gRPC Java 1.83.0 Release Notes

API Changes

api: Turn on RFC 3986 parsing by default and update javadoc. (4456721328)

api: Add Grpc.newChannelBuilder accepting NameResolverRegistry (#11901) (2b86f8f42f). This allows users to explicitly provide a NameResolverRegistry during channel creation rather than relying on the global registry, offering better isolation and control over name resolution per-channel.

Behavior Changes

okhttp: enable TLS 1.3 for servers on Android (3018ce341c). v1.82.0 enabled TLS 1.3 for clients; this does the same for servers

xds: enable orca to lrs propagation by default (#12836) (1e85674a40) Enables xDS configuration to control which fields get propagated from ORCA backend metric reports to LRS load reports as per gRFC A85

xds: Use leaf cluster name for backend service label in metrics, instead of aggregate cluster name (#12882) (c8079eed98). This only has an effect when using aggregate clusters

xds: Hold parsed service config in CdsUpdate (3db3235ebd). Previously, modifications to LoadBalancerRegistry could cause failures in the LB tree

xds: Revert "xds: reuse connections to the control plane across channels" added in 1.81.0 (d49c0b15d8). If using xds heavily with many targets, then MAX_CONCURRENT_STREAMS to the control plane could be exceeded. This then prevents loading resources for new targets, which causes those channels to hang on name resolution. RPCs would see the nondescript "DEADLINE_EXCEEDED: Deadline Context was exceeded after Xs" or "DEADLINE_EXCEEDED: Deadline CallOptions was exceeded after Xs"

Improvements

api: Move attributes to the end of ResolvedAddresses.toString(), for better legibility (103bd4b852)

core: normalize service config number values (#12826) (663c505dbd) This updates default service config validation to accept numeric values represented as Number, not only Double. Common JSON parsers may deserialize integer-looking JSON values such as maxAttempts: 4 and backoffMultiplier: 2 as Integer, which previously caused defaultServiceConfig() to fail with IllegalArgumentException. The values are normalized to Double when copied into the validated service config, preserving the existing internal representation expected by the service config parsing code.

core: DEADLINE_EXCEEDED before initial name resolution completes will now mention “name_resolver” in the error description (56d2b25eb5). Previously there was not a hint as to what gRPC was delayed on when the deadline was exceeded.

netty: Reduce TcpMetrics log from INFO to FINE (4ec83df1eb). This removes unnecessary log noise

core: Enable child channel plugins (#12578) (89aef90d52). This introduces the ChildChannelConfigurer API to allow intercepting and customizing the configuration (such as injecting interceptors or modifying credentials) of child channels created dynamically by load balancers.

Dependencies

Upgrade to Netty 4.2.15 (66c6ab1da6). If you need Netty 4.1 support, please file an issue

Upgrade codegen plugin to C++ Protobuf 35.1 (#12876) (c886f0a06b)

Upgrade various dependencies (064272c61d):

gson to 2.14.0

guava to 33.6.0

cel-java to 0.13.0

protobuf-java to 3.25.9

error-prone-annotations to 2.50.0

opentelemetry to 1.63.0

Documentation

Document how to build with Bazel and introduce bazel support for building android and binder (#12811) (f94574eff7)

Thanks to

... (truncated)

Commits

8f621c0 Bump version to 1.83.1
2bafe5e Update README etc to reference 1.83.1
e1f2dbd netty: Fix client-initiated stream limit bypass in NettyServerHandler (v1.83....
ee8232f core: Coalesce Contiguous Small Buffers for ReadableBuffer (v1.83.x backport)...
b4ca099 Fix docker tagging failure in upload_artifacts by using stable tag name (#12922)
b4fb7f4 build: Allow downloading pkgconfiglite with empty checksum
1fbfa86 Bump version to 1.83.1-SNAPSHOT
8ab6e0a Bump version to 1.83.0
33ad6a4 Update README etc to reference 1.83.0
17d5bd6 Revert "enable child channel plugins (#12578)" (v1.83.x backport) (#12913)
Additional commits viewable in compare view

Updates org.apache.spark:spark-sql_2.13 from 4.1.2 to 4.2.0

Updates com.fasterxml.jackson.core:jackson-databind from 2.21.5 to 2.22.2

Commits

25b2a22 [maven-release-plugin] prepare release jackson-databind-2.22.2
bab1c1a Prep for 2.22.2 release
bc03cf8 Merge branch '2.21' into 2.22
83379fb Merge branch '2.20' into 2.21
0d400c9 Merge branch '2.19' into 2.20
ce36a27 Merge branch '2.18' into 2.19
7a209e1 Post-release dep version bump
a432707 [maven-release-plugin] prepare for next development iteration
176df1d [maven-release-plugin] prepare release jackson-databind-2.18.10
7785f5f Prep for 2.18.10 release
Additional commits viewable in compare view

… updates Bumps the version-updates group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [io.netty:netty-bom](https://github.com/netty/netty) | `4.2.15.Final` | `4.2.17.Final` | | [io.qdrant:client](https://github.com/qdrant/java-client) | `1.18.3` | `1.19.0` | | [com.google.guava:guava](https://github.com/google/guava) | `33.6.0-jre` | `33.7.1-jre` | | [io.grpc:grpc-protobuf](https://github.com/grpc/grpc-java) | `1.82.1` | `1.83.1` | | org.apache.spark:spark-sql_2.13 | `4.1.2` | `4.2.0` | | [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson-databind) | `2.21.5` | `2.22.2` | Updates `io.netty:netty-bom` from 4.2.15.Final to 4.2.17.Final - [Release notes](https://github.com/netty/netty/releases) - [Commits](netty/netty@netty-4.2.15.Final...netty-4.2.17.Final) Updates `io.qdrant:client` from 1.18.3 to 1.19.0 - [Release notes](https://github.com/qdrant/java-client/releases) - [Commits](qdrant/java-client@v1.18.3...v1.19.0) Updates `com.google.guava:guava` from 33.6.0-jre to 33.7.1-jre - [Release notes](https://github.com/google/guava/releases) - [Commits](https://github.com/google/guava/commits) Updates `io.grpc:grpc-protobuf` from 1.82.1 to 1.83.1 - [Release notes](https://github.com/grpc/grpc-java/releases) - [Commits](grpc/grpc-java@v1.82.1...v1.83.1) Updates `org.apache.spark:spark-sql_2.13` from 4.1.2 to 4.2.0 Updates `com.fasterxml.jackson.core:jackson-databind` from 2.21.5 to 2.22.2 - [Commits](FasterXML/jackson-databind@jackson-databind-2.21.5...jackson-databind-2.22.2) --- updated-dependencies: - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.22.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: version-updates - dependency-name: com.google.guava:guava dependency-version: 33.7.1-jre dependency-type: direct:production update-type: version-update:semver-minor dependency-group: version-updates - dependency-name: io.grpc:grpc-protobuf dependency-version: 1.83.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: version-updates - dependency-name: io.netty:netty-bom dependency-version: 4.2.17.Final dependency-type: direct:production update-type: version-update:semver-patch dependency-group: version-updates - dependency-name: io.qdrant:client dependency-version: 1.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: version-updates - dependency-name: org.apache.spark:spark-sql_2.13 dependency-version: 4.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: version-updates ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-09-06T05:02:21Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Aug 30, 2026

dependabot Bot changed the title ~~chore(deps): bump the version-updates group with 6 updates~~ chore(deps): bump the version-updates group across 1 directory with 6 updates Sep 6, 2026

dependabot Bot force-pushed the dependabot/maven/version-updates-1b9c6794ff branch from 016eb14 to 5eec3f7 Compare September 6, 2026 04:42

anush008 closed this Sep 6, 2026

dependabot Bot deleted the dependabot/maven/version-updates-1b9c6794ff branch September 6, 2026 05:02

Navigation Menu

Uh oh!

chore(deps): bump the version-updates group across 1 directory with 6 updates - #87

chore(deps): bump the version-updates group across 1 directory with 6 updates#87
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/version-updates-1b9c6794ff

dependabot Bot commented on behalf of github Aug 30, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Sep 6, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

netty-4.2.17.Final

What's Changed

New Contributors

v1.19.0

Updates

Commits

33.7.1

Maven

Jar files

Javadoc

JDiff

Changelog

33.7.0

Newly introduced problem for Java 9 and Java 10 only

Maven

v1.83.1

gRPC Java 1.83.1 Release Notes

Improvements

v1.83.0

gRPC Java 1.83.0 Release Notes

API Changes

Behavior Changes

Improvements

Dependencies

Documentation

Thanks to

Uh oh!

dependabot Bot commented on behalf of github Sep 6, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Aug 30, 2026 •

edited

Loading